Senior Security Engineer - DevSecOps

carsales; Sydney; Hybrid; AUD 150,000 - 230,000; Full time

Benefits offered by this job

Best Workplace Australia

Family friendly workplace

WORK180 endorsed employer

Hackathons and learning opportunities

Parental and gender-affirming leave

Job summary

carsales, a leading Australian online vehicle marketplace, seeks a Senior DevSecOps Engineer to bridge software development and security. You’ll standardize automation across cloud environments, advance security patterns in AWS, and empower engineering teams with secure components.

Hybrid work enables flexible collaboration with a strong, security-minded culture. Join a renowned tech-driven company that values learning, experimentation, and bold steps toward an evolved platform roadmap.

Qualifications

• Demonstrated experience in software/platform engineering and security engineering.
• Experience implementing end-to-end orchestration and secure patterns in AWS.
• Experience designing and maintaining CI/CD gates across build, release and run phases.
• Exposure to vulnerabilities remediation at run time.
• Hands-on practical use of AI for security and curiosity for new threats.
• Team player with ability to influence across technical teams.

Responsibilities

• Embed security automation into infrastructure and CI/CD pipelines.
• Standardize security practice through Infrastructure-as-code in AWS.
• Secure CI/CD pipelines and deployment practices.
• Automate VulnOps and secure dependencies management.
• Build observability and monitoring on agentic systems with OTEL.
• Contribute to incident response efforts.

Skills

Software engineering

Security engineering

AWS orchestration

CI/CD gates

Vulnerability remediation

AI for security

Cross-team collaboration

Job description

Are you ready to be a big part of something big?

At carsales, we’re all about making buying and selling a great experience. Since 1997, we’ve been evolving with the new economy to help people choose how they move - today and tomorrow.

When it comes to your career, we want to offer meaningful opportunities that empower you to make a lasting impact. But for that to happen, we strive to feel small - small enough to stay agile, learn across teams, and connect authentically with each other.

With a vision to be the global leader in online vehicle marketplaces, we’re transforming how people buy and sell across the world. We discover new ideas and bring them to life. We continue to grow, and we continue to evolve and we’re not afraid to take bold steps to get there.

As a Senior DevSecOps engineer, you will operate at the junction of software development and security, helping our platform engineering and application security teams to standardize and automate at scale how we build, deploy and run cloud applications and agentic systems. This role is suited for a builder who can design, implement, and mature solutions across complex environments. This position sits within ourCyber Securityteam and offers a high level of autonomy to operate and a direct influence into the engineering roadmap.

We embrace hybrid working - combining the flexibility of remote work with the energy and connection of in-person collaboration. We champion flexibility, offer a range of policies, and leave options to support your wellbeing.

What’s on offer

• Recognition as one of Australia’s Best Workplaces™ by Great Place to Work®, a Family Friendly Workplace, a WORK180 endorsed employer.
• A highly engaged, collaborative team where you’ll learn from exceptional talent.
• 24 weeks paid parental leave for primary caregivers, four weeks for secondary caregivers, and six weeks paid gender-affirming care leave.
• Regular hackathons, continuous learning opportunities, and wellbeing initiatives that support your mental, emotional, and physical health.

Job Description

What you’ll be doing

As a Senior DevSecOps Engineer,you'llembed security automation into our infrastructure and CICD pipelines to secure our build and run.As a technical SME, youwillplay a hands-on role in shifting security left and in empowering engineering teams with secure components and patterns.

• Standardize security practice through Infrastructure-as-code and services orchestration in AWS.
• Secure CI/D pipelines and deployment practices.
• Automate VulnOps and securedependencies management.
• Build observability and monitoring capabilities on agentic systemswith OTEL.
• Contribute to incident response efforts.

Qualifications

What we’re looking for

• Demonstrated experience in software engineering/platform engineeringand security engineering.
• Experience implementing end-to‑end orchestration and secure patterns in AWS.
• Experience designing and maintaining CICD gates across the build, release and run phases. Exposure to secure dependency management best practices.
• Exposure to vulnerabilities remediation atrun time.
• Hands‑on practical use of AI for security, high degree ofcuriosity for novel threats and agentic systems.
• Team player with ability to influence and multiply what good looks like across technical teams.

We know not everyone will meet every requirement, and that’s okay. If you’re excited about the role and believe you can make a difference, we’d love to hear from you.

Additional Information

A few other things we want you to know...

• As an equal opportunity employer, carsales welcomes applications from individuals of all backgrounds, identities, abilities, and life experiences. We are committed to fostering a diverse and inclusive workplace where everyone feels valued and supported.
• If you have a disability or require adjustments to participate fully in the recruitment process, please let us know - we’re here to support you.
• We understand the importance of work‑life balance and offer flexible working arrangements, including part‑time options. If you’d like to explore this, just ask during the process.
• We’re also a proud Circle Back Initiative employer, which means we commit to responding to every applicant.
• Successful candidates joining the carsales team will need to complete a National Police Record check and must have full‑time Australian working rights.

So come join us - because every role plays a vital part in our journey toward something big!